Safe merge with params for redirect_to (addresses issue #191)

Malicious request:
http://localhost:3000/projects?host=evil.example.org
Redirect target before:
http://evil.example.org:3000/pt/projects
Redirect target after:
http://localhost:3000/pt/projects
Merge pull request #194 from ianfleeton/safe_merge_params

Safe merge with params for redirect_to (addresses issue #191)
Checks if UserVoice is configured before displaying UserVoice SSO
Merge branch 'master' of github.com:catarse/catarse into refactor_js
Changing to the new && convention
When a project is expired but haven't been finished yet, it was displaying the URL of the link in the box. Now it displays the not successful image in the meantime
Merge branch 'master' into refactor_js
Generate the Rails secret token on first run.
Merge pull request #197 from danielweinmann/add_uservoice_sso_conditional

Add uservoice sso conditional
Merge pull request #198 from danielweinmann/always_display_status_image_in_project_box

Always display status image in project box
show refunded backers on project report #changelog [Fix #54996836]
Merge from master
add test secret token.
new uservoice toolkit
new design adjusts on login view
Merge pull request #199 from argerim/master

Generate the Rails secret token on first run.
more sexy adjusts into registration and login view
now we store the secret token in the database to run on heroku
fixed bug in first rake db:migrate with secret_token generation
solving conflicts